Skip to content
OpenAdvisories
Critical WID-SEC-2024-1075 13 CVEs

F5 BIG-IP: Mehrere Schwachstellen

Published May 8, 2024 · Updated May 12, 2024 · Revision 4 · de-DE

Vendor: F5 Product: BIG-IP

Summary

Ein Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand herbeizuführen. In der Folge ist eine Übernahme der Kontrolle des "BIG-IP Next Central Manager" möglich.

Product

F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.

Vulnerabilities 13

  • High 8.0
    CVE-2024-31156

    BIG-IP Configuration utility XSS vulnerability

    A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Te…

    F5 BIG-IP Network devices
  • High 7.5
    CVE-2024-21793 Public exploit

    BIG-IP Central Manager OData Injection Vulnerability

    An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Next Central Manager Network devices
  • High 7.5
    CVE-2024-25560

    TMM Vulnerability

    When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP BIG-IP Next CNF Network devices
  • High 7.5
    CVE-2024-26026 Public exploit

    BIG-IP Central Manager SQL Injection

    An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

    F5 BIG-IP Next Central Manager Network devices
  • High 7.5
    CVE-2024-33608

    BIG-IP IPsec vulnerability

    When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Network devices
  • High 7.4
    CVE-2024-28883

    BIG-IP APM browser network access VPN client vulnerability

    An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are…

    F5 BIG-IP BIG-IP Edge Client Network devices Browsers
  • High 7.4
    CVE-2024-32049

    BIG-IP Next Central Manager vulnerability

    BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Next Central Manager Network devices
  • Medium 6.8
    CVE-2024-33612

    BIG-IP Next Central Manager vulnerability

    An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Next Central Manager Network devices
  • Medium 6.5
    CVE-2024-32761

    BIG-IP TMM tenants on VELOS and rSeries vulnerability

    Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of…

    F5 BIG-IP Network devices
  • Medium 6.1
    CVE-2024-33604

    BIG-IP Configuration utility XSS vulnerability

    A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Tec…

    F5 BIG-IP Network devices
  • Medium 5.9
    CVE-2024-28889

    BIG-IP SSL vulnerability

    When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software version…

    F5 BIG-IP Network devices
  • Medium 4.7
    CVE-2024-27202

    BIG-IP TMUI XSS vulnerability

    A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of…

    F5 BIG-IP Network devices
  • Medium 4.4
    CVE-2024-28132

    BIG-IP NEXT CNF vulnerability

    Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evalua…

    F5 BIG-IP Next CNF Network devices

Revision history

  1. #4

    Korrektur

  2. #3

    PoC und Blogartikel ergänzt; Text und Bewertung entsprechend angepasst

  3. #1

    Initiale Fassung

  4. #2

    Fehlender Versionseintrag

References